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EXECUTIVE SUMMARY 

The original objectives of the study consisted of five broad areas of 
investigation: 

1. Criteria and issues for explanation of C & T system anomaly detection, 
isolation, and recovery; 

2. Data storage simplification issues for fault detection expert systems, 

3. Data selection procedures for decision tree pruning and optimization 
to enhance the abstraction of pertinent information for clear 
explanations ; 

4. Criteria for establishing levels of explanation suited to needs; 

5. Analysis of expert system interaction and modularization. 


Progress was made in areas 1 , 2, 3 and 5, but to a lesser extent in area 4 
during Phase 1. 

Among the types of expert systems studied were those related to anomaly or 
fault detection, isolation and recovery. Specifically, the interim results 
jlajris and TRW T&C expert system studies were examined and work supplement- 
ing them with explanation facilities was initiated. 

An expert system which is rule based may be thought of as a sequence of 
if-(condition)-then-(action and fact(s)) statements in an endless repeating 
loop. A given statement or rule, when its condition has been satisfied and 
it executes, is said to have "fired". The rule usually asserts facts 
which may satisfy the condition(s) of other If-statements or rules which in 
turn can assert actions and/or other facts and so on. The beauty of these 
systems is that they are flexible, easily expanded or modified, succinct, 
and readily understood by humans. Their problems are a general lack of 
structure, modularity for groups of related rules, and therefore poor 
maintainability. Also, in complex rule-based systems there are problems 
controlling the order in which the rules are applied. That is, a 
"resolution strategy" must be provided. Most expert systems of this type 
are each essentially one big program where object-oriented design and 
information hiding are relatively absent. These latter concepts are 
essential for data integrity of software systems. This is a major issue for 
any project as big as the Space Station, where the total software system 
size may be measured in millions of lines of code. The potential benefits 
of expert systems are too great to reject them out of hand, especially since 
the modularity issue is probably tractable. Modularity in such systems is 
being investigated as part of area number 5 above. 
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Results to date indicate that modularity is possible especially in the case 
of predictable expert systems (i.e., systems where rules cannot make new 
rules). In fact, virtually any predictable expert system is capable of 
being rewritten in a procedural language. In some case that may be even 
desirable for part, if not all, of a given system. This was done in this 
study for a simple subsystem based upon a system simulator written by TRW. 

The simulator, written in C, was rewritten in Ada. Then, fault diagnosis 
and explanation facilities were implemented to investigate area number 1 
(explanation facility) and area number 5 (interaction and modularization) 
described above. The source code for this system is in Appendix B as 
MAIN SIM M0D3.ADA. Results of this portion of the the study are shown in 
item~b oT the body of this report. Briefly, the results indicate that, an 
explanation facility is best structured as an integral part of the system 
rather than as an appendage. Object-oriented modularization promotes data 
integrity, and that the capability of retrieving and using old data is 
probably best achieved through a procedural language. Object-oriented 
design was first suggested by Parnas and implies that each object 
(e.g., variable) should be controlled by one module and the resources 
necessary to modify or change any of its characteristics should reside only 
within that module. 

The areas number 1 (expert explanation), number 2 (storage simplification) 
and number 3 (decision tree issues) were investigated by the implementation 
of a simple engine diagnosis program. The source code and concomitant 
comments for DIAG4.ART are in Appendix A. The results are shown in item B 
of the body of the report. Briefly, the results show that rules have a 
taxonomy (e.g., explanation rules, bookkeeping rules, action rules), and 
that the time stamping of facts is necessary for explanations of any past 
expert system actions. The need for functional or domain partitioning was 
one of the discoveries of this investigation. 

Not much implementation of techniques for pruning decision trees of 
irrelevant decision nodes (area number 3) was accomplished; however, these 
and other data compression concepts were discussed extensively and some 
paths of investigation and experimentation are indicated. So-called spine 
optimization of the decision tree may provide a capability for explaining in 
retrospect how and why a decision has been reached or even perhaps why a 
particular decision was not reached. (A spine is defined as the conjunction 
of decisions for which the retrieval is a single conclusion.) 

In the relatively short time this study has been in progress, what were 
originally nebulous issues have become more clear. This is not to say that 
they have become more tractable, but at least some of the issues are better 
defined than they were four months ago. We expect that this trend will 
continue* 
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BODY OF THE REPORT 


A. Introduction 

The original statement of activity objectives consisted of several items 
summarized as follows : 

1. Examination of existing C&T systems configuration and monitoring 
problems — 

The activity started with an examination of fault detection expert 
systems and historical database storage, which is one facet of the 
subject area of C&T system anomolous behaviour. An anomolous event 
may be defined as the situation when normal sytems software has 
been unable to operate according to plan. Some tentative 
conclusions for structuring these activities have been determined. 
This activity continues. 

2. Audit trail simplification policies — 

Some experimental work has been accomplished for this activity. In 
particular, audit trails for fault detection expert systems have 
been analyzed. An hypothesis has been formulated, based on 
preliminary results which indicates that shallow explanations may 
be able to use a limited audit database but deeper explanation 
facilities may require a parallel expert system, otherwise the 
audit trail database might become too cumbersome. The question of 
the effect of utilizing distributed expert systems on practical 
explanation facilities has not yet been considered, but that is a 
subject which will need to be addressed once the resources needed 
by such facilities have been identified. 

3. Data selection procedures — 

This activity is closely related to item 2 but has been modified to 
focus upon decision tree pruning and storage depth of unchosen 
paths. For explanation purposes one hypothesis to be explored is 
to store chosen path nodes and one node level below each chosen 
path node for all unchosen paths. This would, at a minimum, double 
the storage required for a chosen decision tree but it would 
obviate the necessity for reexercising a duplicate of parts of the 
original expert system for shallow explanations. No general rule 
with specifics has yet been established but some simple subsystem 
simulations, namely, DIAG4.ART and MAIN_SIM_M0D3.ADA, have given 
some insight into this problem. This activity continues. 

4. Criteria development for user-expert system interfaces 

This activity has been modified to focus upon identifying levels of 
explanation suited to various user's requirements. It will be 
assumed that user requirements will have already been Identified. 

It will be assumed that short explanations will be supplied 
initially and that levels of depth may be requested at any point in 
the process. This activity has not seen much progress to date but 
will continue in the revised direction. 



5. Expert system interaction — 

Intercommunication and hierarchical decision priorities have been 
discussed but no definitive assertions have yet been determined. 

first sight this issue seems related to partitioning and 
modularizing expert systems. This latter issue is one which is to 
be explored in the next phase of this study. 

B. Explanation Facilities and Decision Trees 

An explanation facility will be an important part of any system 
that is used to provide diagnostics for problems that may develop 
in the tracking and communication systems on the space station. 

Also, once the most probable source of a problem has been 
identified and corrective measures are begun, an explanation of why 
and how such actions have been taken will be necessary. It would 
appear that there are several levels of explanation that can be 
provided. At one extreme, a complete explanation with all the 
intricacies and details of all of the Inferences used could be 
provided, such that the explanation would be effectively equivalent 
to providing a complete decision tree (in which only one path has 
been followed). At the other extreme, a brief, superficial 
explanation could be provided that would only indicate the most 
immediate reaso'n why a particular path was selected. This might be 
of use in the case when a systems human monitor might have selected 
a different alternative than did the expert system and he seeks the 
reasons for the selection made by said expert system. In this 
latter case, it would be practical to store the path and the 
collection of decisions made along the path. However, simply 
quoting the path to the given conclusion will not, in general, 
provide a satisfactory explanation because there may be irrelevant 
decisions on the path and there may be a need for deeper 
explanations. It appears that the need for deeper explanations can 
only be satisfied if the complete reasoning process for reaching a 
given conclusion is available (i.e., either we provide access to 
all the rules that were used or we provide the complete decision 
tree). Such might be needed when a large scale manual intervention 
is planned for direct control of C&T systems and in that case 
irrelevant decisions would effectively be "noise" in the system. A 
procedure is available that would permit the removal of irrelevant 
decisions. It is called spine optimization, which consists of 
pruning the decision tree to obtain a "prime spine", and which 
prime spine is formed by delaying or removing irrelevant decision 
nodes in the tree. Most of the work so far on spines has been 
theoretical, so it is not clear that the benefits of such removal 
would justify the costs. 

It may be, in some cases, that the option of providing the complete 
decision tree would not be practical in light of the large ^ount 
of storage that this would require for each of many points in the 
past. It is possible, however, that a few of the most recent 
decision processes could be stored in their entirety and that a 
number of older decision processes could be saved in an abbreviated 
form (perhaps with just a simple rundown on the decision path 
actually taken with only immediate explanations for taking a 
particular path provided). 
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If more elaborate explanations were required for older decisions, 
then it would still be possible, albeit time-consuming, to reload 
another knowledge base with the facts that were true at the time of 
interest and then begin to execute some of the explanation rules 
over again, only this time with the user interrupting that expert 
system and asking questions about the decisions which were made. 

One of the dilemmas encountered with after— the— fact explanation 
facilities is that the explanation facility itself must provide 
some constructive filtering. Indeed, in order to remove irrelevant 
decision information the explanation program must prune and perhaps 
redo, albeit with a different perspective, some of what the 
diagnostic facility did in the first place. The simplest thing to 
do would be to supply the complete decision tree, but this would be 
barely one cut above the Automate Reasoning Tool (ART) dribble file 
as far as user utility is concerned. 

An hypothesis or question which probably is worth considering is, 
•‘Should the explanation facility 'anticipate’ queries so that it 
would effectively run in parallel to the diagnostic expert facility 
but without encumbering it?“ Another possibility is to initiate 
the building of a more extensive event data base whenever an 
anomolous condition occurs. 

At this point, without making a definite statement, let us offer a 
conjecture. We are of the opinion that storing the entire decision 
tree may be a viable solution, after all. It's not really as bad 
as storing the entire state at several points in time which 
might be needed since some problems will be building up over time 
— in order to be able to provide explanations. The decision tree 
information would be kept active for a minimal time, presumably 
until time had passed when an explanation might be required, and 
then archived. We think that the decision tree also has just those 
rules used/needed to provide the explanation. If the other 
approach is used, we would have to ferret out those rules that were 
relevant or reload the entire expert system. 

The ART Environment and the Attempt to Implement an Elementary 

Simulation, Diagnostic and Explanation System 

The ART Environment 

There are many advantages and some deficiencies to the Automated 
Reasoning Tool (ART) environment. The flexibility allows both 
forward and backward chaining with schema (which provides memory 
slots similar to frame-based languages), and viewpoints. The 
viewpoints may provide a way of recalling how a particular expert 
system operated at a given time in the past. This is something 
which would be useful for providing an explanation of a past event. 
Unfortunately, the first diagnostic and explanation example program 
did not use viewpoints and the lack of the availability of file 
input-output limited the scope of the program. Useful knowledge 
was obtained, nevertheless, and that should help the development of 
future explanation experiments. 
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Reconnnendations on Expert Systems Languages 

A few observations have resulted from the first diagnostic- 
explanation system. The ART language coupled with the Symbolics 
system is a very versatile, albeit sometimes clumsy, approach to 
expert system development. The feasibility of developing an 
in-house (Ada-based) rule-based language should be investigated. 
This would allow data structures and I/O requirements to be 
tailored for the application. 

This could also allow the development of subprocedure calls for 
both subprocedures written in sequential languages and those 
written in the development language (in other words, calling other 
expert system programs). 

The DIAG4.ART Diagnostic-Explanation Program 

Objectives 

The goal of this program was to demonstrate at least a rudimentary 
explanation facility on a limited domain, mainly as a means of 
exploring the concepts involved, and also as a means of learning 
the ART language and Symbolics system. 

Description 

The program, written in ART, simulates the operation of a 
four-stroke, two-valve, single-piston internal-combustion engine. 

It also diagnoses failures in the ignition phase of the engine 
operation, and implements corrective action. It is then capable of 
explaining the diagnosis and the corrective action taken. 

The program was also written so as to reflect some logical 
organization: The explanation rules are at the beginning of the 

program, followed by the bookkeeping rules (those responsible for 
updating the current parental and subgoals), followed by the 
initializing **split*’ rules, followed by the rules for action at 
each stroke of the cycle. The "split'* rules were made necessary 
because the condition portion of a rule in ART does not have a 
provision to match on two OR’ed schema slots. 

Program Outline 

The engine state is modeled by a schema named CURRENT which is 
modified by the action of the stroke and ignition rules to reflect 
the operation of the engine. Each relevant component of the engine 
state is stored in a slot of the schema. At the same time, each 
slot in CURRENT is compared to a similar slot of the IDEIAL engine 
state. Discrepancies, such as the spark plug not firing, cause 
error flags to be set which allow the diagnostic rules to fire. In 
this case, each flag triggers one diagnosis, but combinations of 
flags could also do this • 

Diagnostic rules printout specific error messages and take 
corrective action (replacing the spark plug). They also query if an 
explanation is required. If one is, another flag is set. 

The combination of the error and explanation flags allow the firing 
of explanation rules , of which there are two in this program. 


7 


Conclusions 

The program served as a learning process, but ended up with serious 
deficiencies : 

The fault tree was never more than two levels deep (both spark 
plugs fail) and did not demonstrate any combinatorial failures nor 
did it ever have to ’’guess’*. There couldn^t be a wrong diagnosis. 

All explanations were developed as the program ’’sequenced” through 
the simulation. No explanations could be given after the cycle 
continued: the program has no memory of what has already happened; 

it can only respond to the current state. This could be remedied 
by time-stamping all facts (saving the telemetry stream), but this 
would also require a new set of rules to react with past data in 
addition to those already existing which react with current data, 
effectively doubling the size of the program (at least). 

All explanations either exist from the beginning or they could not 
be given. The drawback with programming in this style is that all 
possible faults and fault combinations must be figured in advance 
and coded into the program. This is trivial for a program this 
size, but is not practical for a large program. This increases the 
size of the program exponentially with the number of components. 

It also requires being able to simulate the ’’correct” functioning 
of the system at all times in order to detect discrepancies. 

The source code for this program is shown in Appendix A. 


Proposed Further Avenues of Exploration 

The concept employed with this program would only allow 
explanations to be given ”on the fly*', that is, only after each 
diagnosis and/or fault correction. Explanation cannot be generated 
past that point in time; there is no memory of the transaction. 

To avoid this fault then in order to generate explanations of 
past events either: 

1. Save all explanations for possible future recall, or; 

2. It must be possible to generate explanations from saved 
data. 

There are a number of unexplored avenues here , such as the 
optimum way of generating explanations , the best way of 
storing data, etc. 

Another concept to be explored is that of partitioning the expert 
system. The program, as currently written, does not support this, 
but the idea of breaking the system into modules, either 
functionally, where a module would perform certain tasks, or by 
domain, where each module would service a system or subsystem of 
the overall domain. The ability to do so would have quite an 
effect on the memory requirements and speed of the system. 
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Ada Implementation of a C&T Subsystem Simulator (TRW), Fault Detection 
and Explanation Facility with User Interaction 

Motivation (objective) 

This demonstration program was initiated for two reasons. First to 
demonstrate how a sequential software system could effectively 
duplicate the results of a simulation written in C and an expert 
system written in a specialized rule— based language such as ART 
(Automated Reasoning Tool by Inference Corp.). The second reason 
was to demonstrate that in contrast to conventional rule-based 
systems a sequential system can more easily store facts in a 
database and access them for an explanation facility. An ancillary 
reason was to examine how modularization could be used when 
implementing both diagnostic and explanation facilities. 

Structure (program outline) 

The program, written in Ada, consists of five modules called 
packages . 

1. MAIN_SIM_M0D3 

This is really not a module but rather the driver program for 

the demonstration system. It essentially structures the 

system by calling subprograms. A simplified algorithm for 

this program is given in the following enumerated steps. 

(1) Initialize the communications system database; 

(2) Check for inconsistencies in the data, and if there are 
any, call a subprogram to ask the human monitor to 
correct the data; 

(3) Call the equipment emulator program; 

(4) Based upon the measured equipment output and the status 
of the switches, determine the condition of the equipment 
(i.e., diagnose the probable cause of failure, if any); 

(5) Call a subprogram to display the status of the equipment 
to the human monitor; 

(6) Call subprograms to provide an explanation of the 
diagnosis if requested; 

(7) Call a subprogram to interact with the human monitor to 
see if another simulation is to be run; 

(8) If the human monitor wishes to stop the program then 
terminate else call a subprogram to ask. the monitor to 
update the simulation parameters and then go to step (2). 


Structure (program outline) - continued 
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2. Y_OUT_MOD 

This package contains the equipment emulator subprogram. It 
effectively simulates the action of the hardware given the 
parameters in the equipment status database. 

3. FAULT-ANALYZE 

This package contains the subprograms which measure the 
observable parameters and determines the probable fault, if 
any. 

4. EXPLAIN_DIAGNOSIS 

This package presents an analysis of the reasons behind the 
fault diagnosis when requested by the human monitor. 

5. I_0_SIM_M0D 

This package is the one which accesses and updates the 
simulated equipment parameters. 

The source code for this system is shown in Appendix B. 


Observations Based Upon Results 

Not too much can be asserted with certainty but there are a few 

points which the work suggests. Among those are: 

1. To explain even a moderately complex fault analysis decision 
it may be simpler to parallel a part of the decision process 
rather than try to filter the information from information 
written into the data base. Again, a trade—off exists between 
the classical performance parameters of execution time versus 
memory (primary and secondary storage). For example, in the 
diagnostic package called FAULT_ANALYZE the principal program 
DIAGNOSIS tests the output power EQUIP_Y_OUT_LEVEL and if it 
is less than -145 dbm it calls a "low level" program to 
examine the on-off switches in SWITCH_STATUS . If the main 
power switch is "ON" then the oscillator switches are tested. 
If the selected oscillator is "ON" then the program "reasons" 
that the selected oscillator is inoperative. Now when an 
explanation of this event is requested the EXPLAIN_DIAGNOSIS 
package is activated. Examining the code for procedure 
EXPLAIN DIAGNOSIS we see that it parallels the reasoning of 
procedures DIAGNOSIS and SWITCH STATUS in package 
FAULT ANALYZE, that is to say, it has the same nested "if" 
structure. The only thing it adds is the diagnostic message, 
"We found the selected oscillator switch to be ON, the power 
output was in the noise level, so potentially we had a 
catastrophic oscillator failure." If the DIAGNOSIS and 
SWITCH STATUS programs had been more cooperative they could 
have selected the appropriate literal value for an enumeration 
variable and stored this "hook" in the data base for access by 
the EXPLAIN DIAGNOSIS package. Then all the EXPLAIN_DIAGN0SIS 
procedure would have to do is examine this variable by virtue 
of a simple "case" statement and supply the quoted 
explanation, "We found.. etc." 


Observations Based Upon Results ~ continued 
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Such a "type" definition for the desired variable niight be: 

type Switch_Permutation_Type is 
(POWERJOFF, 

POWER_ON_OSC_OFF , 

POWER ON OSC ON); 


A variable of this type could be set equal to one of the 
enumeration literals by procedure SWITCH_STATUS in package 
FAULT_ANALYZE. 

2. Communicating with a user and writing facts to files and/or 
ephemeral data storage which facts are useful for explanation 
facilities may require interfacing a given expert system to 
procedural language I/O routines. 

3. It seems that it should be possible to modularize a given 
expert system to some extent. For example, a FAULT_ANALYZE 
subsystem could in large measure be separate from an 
EXPLAIN DIAGNOSIS subsystem. There would probably be some 
shared data and possibly even some shared utility routines, 
but the main thread of each subsystem could be separate. 

4. One of the deficiencies of this implementation is that 
explanations are done with the same database as the fault 
analysis system, and before any recovery corrections are made. 
Thus, the database is unchanged when the explanations are 
made. The programming system could easily be altered to allow 
changes in the data and still allow an explanation after the 
fact. The technique employed would be to create two variables 
for each entity, one for the old value and one for the current 
value. This is easily done in Ada or in any procedural 
language but is more difficult in a so-called expert systems 
language. This may indicate that any production system would 
require its expert systems language to provide an interface to 
procedural language subprograms. 


Future Direction 

The next task which may be proposed is to expand this demonstration 
program to include more realistic fault detection with more 
realistic "hook" data generation. Then the explanation subsystem 
could be restructured to use these improvements. A parallel system 
in ART will also be implemented (if feasible). 
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SUMMARY OF OVERALL RESULTS AND RECOMMENDATIONS 

A. The issue of storing the complete decision tree versus only storing the 
knowledge base for an explanation facility has not been resolved, but a 
few alternatives to be explored have been identified. 

1. Store the decision tree in its entirety with perhaps one branch 
node for paths not taken at each node in the decision tree. 

2. Build and store a complete knowledge data base whenever an anomaly 
occurs. (This could be any undesirable outcome such as the 
software system displaying unanticipated behavior. This could be 
signalled by the astronaut monitor or the expert system itself such 
as when a system failure is detected by the low level systems.) 

3. Store only the facts with appropriate time stamps, and when an 
explanation is required, load a system containing rules similar to 
the original expert system so as to effectively parallel the 
operation of the original expert system but this time allowing the 
user to interrupt this parallel system to ask for appropriate 
explanations about paths not taken. 

These alternatives are not mutually exclusive but all should be examined 
in future work. 

B. The issue of the features of an expert systems language which language 
is appropriate for development and perhaps implementation of software 
systems which meet C & T functional requirements needs to be addressed. 
This recommendation is based upon the experience acquired by the 
structuring of a simple simulation and diagnostic-explanation program 
written in ART, (DIAG4.ART in Appendix A), the program had to be all in 
one module. In addition, there were the file I/O deficiencies of ART 
and the difficulty of storing more than one value for a given parameter. 
As a minimum any such language should be capable of interfacing with a 
compiler language program in a straightforward manner. 

C. It is recommended that the issues of object-oriented design for expert 
systems be raised and investigated# In addition, the concept of 
supplying adequate **hooks** for explanation should be addressed early. 
Explanation facilities are best implemented when they are built in and 
not just **added** as a separate entity. If this is not done the 
explanation facility requires additional resources and must parallel 
some previously "paths** already trodden by other systems. The issues of 
object-oriented design, modularization, and so-called infoinnation hiding 
may not be just academic but a necessity for implementation of any large 
and perhaps distributed control and monitoring system, be it a 
procedural and/or rule-based software system# The topic of object- 
oriented design for expert systems addressing anomaly detection, 
recovery and explanation was examined by structuring a procedural 
software system in Ada# The system consisted of a driver and hardware 
status simulator, fault diagnosis, and fault explanation modules for a 
small radio frequency communication subsystem# Implementing expert 
system functions in Ada indicated that modularization and object- 
oriented design indeed are feasible without compromising effectiveness# 
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... Mode: ART; Base: 10.; Package: ART-User 

(defachema engine-state "state of engine - beginning of intake-stroke 
(carburation good) 

{piston-direction descending) 

(sparkplugl good) 

(sparkplug2 standby)) 

(de f schema current 

(instance-of engine-state)) 

{de f schema ideal 

{instance-of engine-state) ) 


(deffacts state 

(state-name intake)) 

(defrule compare-ok "compares current and ideal if same” 
(schema current (carburation ?state3)) 

(schema ideal (carburation ?state3)) 

(schema current (piston-direction ?state4)) 

(schem-a ideal (piston-direction ?state4)) 

= > 

(printout t t "compared ok" t t)} 

{defrule compare-not -carbu ration 

{schema current (carburation ?state3)) 

{schema ideal {carburation -?state3) ) 

- > 

(printout t t "carburation compared not ok" t t) 
(assert (error-trap carburation))) 

(defrule compare-not -di rect i on 

(schema current (piston-direction ?state4)) 

(schema ideal (piston-direction -?state4)) 

= > 

(printout t t "piston-direction compared not ok" t t) 
(assert (error-trap direction))) 


(defrule no-ignition 

(state-name power) 

?ignition <- (ignition fail) 

= > 

(printout t t "sparkplug did not fire" t t) 
(printout t t ?ignition t t) 

(assert (error-trap ignition) ) 

(retract ?ignition)) 


(defrule intake-stroke 

?state-name <- (state-name intake) 

(schema current (carburation ?state3>) 
(schema ideal (carburation ?state3) ) 
(schema current (piston-direction ?state4)) 
(schema ideal (piston-direction ?state4)) 


- > 


(printout t t "1st Stroke - Intake Completed" 
(modify 

(schema current 

(piston-direction ascending))) 


(modify 

(schema ideal 

(piston-direction ascending) ) ) 
(retract ?state-name) 

(assert (state-name compression) ) ) 


t t) 


(defrule compression-stroke 

?state-name <- (state-name compression) 

(schema current (carburation ?state3)) 

(schema ideal (carburation ?state3) ) 

(schema current (piston-direction ?state4) ) 
(schema ideal (piston-direction ?state4)) 

- > 

(printout t t "2nd Stroke - Compression" t t) 
(modify 

(schema current 

(piston-direction descending))) 
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(schema ideal 

(piston-direction descending))) 
(retract ?state-name) 

(assert (state-name power) ) ) 

(printout t t "Did sparkplug : fire or fail?" t t) 
(assert (Ignition = (read) ) ) ) 


{defrule power-stroke 

?state-name <- (state-name power) 

?ignition <- (ignition fire) 

(schema current (carburation ?state3)) 
(schema ideal (carburation ?state3) ) 
(schema current (piston-direction ?state4)) 
(schema ideal (piston-direction ?state4)) 


(printout t t "3rd Stroke - Power" t t) 
(modify 


(schema 


(modify 


current 

(piston -direct ion 


(schema ideal 

(piston-direction 
(retract ?state-name) 

(assert (state-name exhaust)) 
(retract ?ignition)) 


ascending) ) ) 


ascending) ) ) 


(defrule exhaust -stroke 

?state-name <- (state-name exhaust) 

(schema current (carburation ?state3)) 
(schema ideal (carburation ?state3) ) 
(schema current (piston-direction ?state4)) 
(schema ideal (piston-direction ?state4)) 


(printout t t "4th Stroke - Exhaust" t t) 
(modify 

(schema current 

(piston-direction descending) ) ) 


(modify 

(schema ideal 

(piston-direction descending))) 
(retract ?state-name) 

(assert (state-name intake))) 


(defrule switch-plugs 

?error-flag <- (error-trap ignition) 

?state-name <- (state-name ?name) 

(schema current (sparkplug2 standby)) 

= > 

(modify 

(schema current 

(sparkplugl fail) 

{spar)cplug2 good))) 

; (retract ?error-flag) 

(retract ?state-name) 

(assert (state-name compression) ) 

(printout t t "Sparkplugl set to Failed" t t) 

(printout t t "Sparkplug2 reset from standby to good" t t) 
(printout t t "Is an explanation desired? yes or no" t t) 
(assert (expl anat i on- f lag “(read)))) 

(defrule no-plugs 

?error-flag <- (error-trap ignition) 

?state-name <- (state-name ?name) 

(schema current (sparkplug2 good)) 

(schema current (sparkplugl fail)) 

= > 

(modify 

(schema current 

(sparkplug2 fail))) 

; (retract ?error-flag) 

(retract ?name) 

(assert (state-name compression) ) 

(printout t t "Sparkplug2 set to Failed" t t) 

(printout t t "Is an explanation desired? yes or no" t t) 
(assert (explanat i on- f lag =(read)))) 
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(defrule igni t ion-f ire 

(state-name power) 

(split ( (spar)tplugl current good) 

= >) 

( (spar)^plug2 current good) 
->) ) 


(printout t t "Did pparkplug : fire or fail?" t t) 

(assert (ignition =(read)})) 

(defrule explanation-1 

?error-flag <- (error-trap Ignition) 

?ignition <- (ignition ?fire) 

(schema current (sparXplugl fail)) 

(schema current (sparkplug2 good) ) 

?expl-flag <” (explanation-flag yes) 

= > 

(printout t t "Spar)cplug 1 did not fire. Therefore it was replaced by the bac)^up." t t) 
(retract ?error-flag) 

(retract ?expl-flag)) 

(defrule expl anat ion- 2 

?error-flag <- (error-trap ignition) 

; ?ignition <- (ignition ?fire) 

(schema current (sparkplugl fail)) 

(schema current (sparkplug? fail)) 

?expl-flag <- (explanat ion- flag yes) 

^ > 

(printout t t "Sparkplug 2 did not fire. 

Since it is the backup sparkplug, 

(sparkplug 1 has already been considered failed) 
there is no remedy. 

however, since it is unusual to have both sparkplugs 
failed, the problem may reside elsewhere." t t) 

(retract ?error-flag) 

(retract ?expl-flag) ) 
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APPENDIX B 

Source Code for System MAIN_SIM_M0D3.ADA 
a Communication Amplifier Diagnostic/Explanation Software System 
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